Privacy Policy

This Privacy Policy explains how Bidlyy ("we", "us") collects, uses, and shares information when you use bidlyy.com and related services (the "Service"). By using Bidlyy you agree to the practices described here.

1. Information we collect

• Account information: email address, display name, username/handle, and password (hashed) when you sign up. If you sign in with Google, we receive your email, name, and profile picture from Google.
• Profile information: avatar, biography, links, category, and other details you choose to display.
• Media you upload: photos, videos, and other files you attach to listings, profile, or chat messages.
• Payment information: processed by our third-party payment processor. We do not store full card numbers. We do receive limited details such as the last four digits, card brand, billing country, and payout account status.
• Transaction history: bids, wins, listings, payouts, and disputes associated with your account.
• Communications: messages and attachments you send through in-app chat, and emails you send us for support.
• Device and usage data: IP address, browser type, pages viewed, and similar log data collected automatically.

2. How we use information

• To operate the Service — hosting listings, running auctions, delivering messages, and processing payments.
• To verify identity, prevent fraud, and enforce our Terms of Service.
• To send transactional emails (bid confirmations, wins, disputes, payouts) and, if you opt in, product updates.
• To provide customer support and respond to your requests.
• To comply with legal obligations and respond to lawful requests.

3. Google Sign-In

Bidlyy offers Google Sign-In as an authentication option. If you choose it, Google shares your basic profile information (name, email, profile picture) with us so we can create or log into your Bidlyy account. We do not receive your Google password and we do not access any Google services beyond the sign-in scopes you approve. You can revoke access at any time from your Google Account settings.

4. Third-party service providers

We rely on the following categories of third parties to run the Service:

• Backend and storage provider: hosts our database, authentication, and uploaded media.
• Payment processor: handles payments, holds, payouts, and dispute events. Payment card details are collected and stored by the processor, not by Bidlyy.
• Email delivery: sends transactional and account emails.
• Analytics and error reporting: helps us understand usage and diagnose problems.

These providers only receive the information they need to perform their function and are contractually required to protect it.

5. Sharing between users

Profile information you make public (handle, avatar, bio, listings, and public bids) is visible to other users. When you win an auction or receive a bid, the counterparty can see your handle, avatar, and any messages or attachments you send through the in-app chat for that transaction.

6. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember preferences, and secure the Service. We may also use them for basic analytics. You can control cookies through your browser settings; disabling them may break parts of the Service such as sign-in.

7. Data retention

We retain personal data for as long as your account is active and for a reasonable period afterward to comply with legal, tax, accounting, and dispute-resolution obligations. Transaction records may be retained for longer where required by law. When retention is no longer necessary, we delete or anonymize the data.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain uses. To exercise these rights, email us at support@bidlyy.com. We will respond within a reasonable timeframe and may need to verify your identity.

9. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls on our infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

Bidlyy is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International transfers

Your information may be processed in countries other than your own, including the United States. Where required, we use appropriate safeguards for such transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and, for material changes, notify you by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

For questions about this Privacy Policy or your personal data, email support@bidlyy.com.